Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/94efcf26-f6be-4bd8-bccc-98bfe6818f2e.roa
File: 94efcf26-f6be-4bd8-bccc-98bfe6818f2e.roa (raw, json)
Hash identifier: MZa9oXBxd9MEwzWuX0HdDe0rBj5ZfqMeZ6M7EpW7Hwk=
Subject key identifier: 71:95:98:DA:D3:27:D2:90:EC:FE:61:DF:A5:4D:A0:EA:93:E5:4C:27
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 69CD1C7B70F75CD8C6CC302B81908F355177BD16
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/94efcf26-f6be-4bd8-bccc-98bfe6818f2e.roa
Signing time: Sat 23 Sep 2023 00:00:00 +0000
ROA not before: Sat 23 Sep 2023 00:00:00 +0000
ROA not after: Sat 28 Oct 2023 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
69:cd:1c:7b:70:f7:5c:d8:c6:cc:30:2b:81:90:8f:35:51:77:bd:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Sep 23 00:00:00 2023 GMT
Not After : Oct 28 23:59:59 2023 GMT
Subject: serialNumber=94faa40f99a1e593f0622ada2ed6c66618b29fdbb766a2573438ba62f4ee64a7, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:5e:c3:bb:e9:52:1a:69:3c:8f:b9:d6:73:47:
3b:e4:fb:2e:56:87:5c:72:ed:44:fc:3e:bf:b4:5b:
19:2f:b7:5e:1a:ca:73:e4:2f:1e:c6:be:ef:f6:9c:
c4:22:56:60:2e:f4:d6:6c:02:ad:2b:ec:03:1b:93:
b1:80:7d:fa:85:6d:2e:b1:c4:ae:e8:97:a3:47:e1:
e4:32:70:24:c2:24:83:5f:7f:c9:87:a0:9c:12:52:
8b:97:f3:1b:f6:f7:53:03:d2:bc:b4:4f:26:49:41:
36:8a:5e:2b:a3:9c:e0:fe:26:6e:de:b8:bb:00:7d:
c2:10:ad:cd:1e:e7:c9:96:ed:c9:bd:cd:27:6d:e8:
af:bc:37:c1:59:da:e9:d6:e2:39:c5:f2:f3:5a:b4:
39:25:41:f6:31:e4:f1:6e:a9:b3:f2:36:a7:fb:7b:
00:d3:c0:f8:91:00:89:1e:76:1c:60:39:8d:0e:44:
24:77:1d:54:e7:9d:9c:98:10:5e:dd:45:12:e3:ec:
c2:99:f3:8c:40:07:04:09:40:30:fe:14:d7:fc:59:
da:c5:95:9b:75:c8:31:a0:df:f1:b8:20:e1:ee:10:
09:2f:7c:c7:b2:2b:54:c4:93:fd:b0:6d:89:9d:0f:
a2:55:55:f6:7a:37:20:43:e4:1b:2b:df:2c:fa:ac:
b3:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:95:98:DA:D3:27:D2:90:EC:FE:61:DF:A5:4D:A0:EA:93:E5:4C:27
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/94efcf26-f6be-4bd8-bccc-98bfe6818f2e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
7e:3d:38:7e:17:bf:9e:32:fc:29:63:57:b5:04:30:a3:99:23:
b0:10:f3:e2:a3:cd:af:a3:29:83:36:33:92:e0:da:59:19:67:
18:16:c7:af:ba:24:5e:44:b0:44:01:34:d2:c1:ab:fa:5b:c1:
8c:86:2b:5b:c2:98:8b:a9:88:54:f3:ce:4a:7d:f7:02:c1:2e:
be:1f:81:52:d4:44:66:f6:d6:4e:f7:86:7a:d1:af:19:9e:5f:
6d:51:e7:8e:28:bb:9e:b5:e6:8b:ea:95:5b:50:82:10:40:4d:
1d:18:df:38:cc:e4:26:8d:fb:67:26:c7:4e:2e:01:d8:14:7d:
af:10:2d:da:72:15:c3:2c:b7:0c:70:24:c8:52:eb:6b:59:5f:
3f:e8:01:6c:1e:d7:45:dd:e4:06:af:81:04:42:ab:65:e6:4b:
35:39:a9:ab:84:9f:90:fa:07:a9:05:dd:dd:27:a0:24:34:40:
5a:06:02:29:16:c6:1f:45:dc:59:ee:eb:03:6f:49:78:d1:9f:
7c:b0:ee:29:25:b7:6e:1d:bc:4e:58:4b:80:4b:15:be:70:aa:
80:68:10:90:42:d8:e7:5d:11:39:74:5d:32:3c:73:dd:66:ff:
f0:32:bf:f8:2b:ba:79:93:9d:4b:fd:71:f1:b8:db:ae:2b:15:
98:a5:43:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 15:36:11 2025 by rpki-client